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Abstract 


Abstract  calculi  (tree  transformation  systems,  term  rewriting  systems)  express  com- 
putational processes  by  transformation  rules  operating  on  abstract  structures  (trees). 
They  have  applications  to  functional  programming,  logic  programming,  equational  pro- 
gramming, productions  systems  and  language  processors. 

We  present  a  proof  of  the  Church-Rosser  Theorem  for  a  wide,  useful  class  of  abstract 
calculi.  This  theorem  implies  that  terminating  reductions  always  yield  a  unique 
reduced  form  in  these  calculi,  which  has  the  practical  result  that  transformation  rules 
can  be  safely  applied  in  any  order,  or  even  in  parallel.  Athough  this  result  has  previ- 
ously been  established  for  certain  classes  of  abstract  calculi,  our  proof  is  much  simpler 
than  previous  proofs  because  it  is  an  adaptation  of  Rosser's  new  (1982)  proof  of  the 
Church-Rosser  Theorem  for  the  lambda  calculus. 

1.    Introduction 

A  calculus  has  the  Church-Rosser  Property  if  any  terminating  reduction  of  a  formula  of 
the  calculus  always  yields  the  same  reduced  form.  The  Church-Rosser  Theorem,  origi- 
nally proved  in  1936  [5],  implies  that  the  lambda  calculus  has  the  Church-Rosser  Pro- 
perty. In  this  paper  we  prove  that  the  Church-Rosser  Property  holds  for  a  certain  wide, 
useful  class  of  abstract  calculi  (also  known  as  tree  transformation  systems  and  term 
rewriting  systems). 

Abstract  calculi  are  increasingly  relevant,  due  to  their  applications  in  functional 
programming  [l,  3,   10],  logic  programming  [6,  8,  17],  equational  programming  [4,  9, 
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14,  15,  16]  and  production  systems  [19,  20].  The  Church-Rosser  properties  of  abstract 
calculi  have  been  previously  investigated  [21].  Our  proof  differs  from  its  predecessors 
in  making  use  of  an  adaptation  of  a  new,  simplified  proof  of  the  Church-Rosser  Theorem 
first  presented  by  Rosser  in  1982  [22].  Rosser's  new  proof  is  a  vast  improvement  on  its 
predecessors  [2,  5,  7,  11,  12,  13,  18,  21,  23],  and  for  the  first  time  makes  it  feasible  to 
prove  the  Church-Rosser  Theorem  in  classroom  situations. 

2.  Definitions  and  Natation 

2.1  Syntax 

Atoms,  Formulas  and  Lists:  "We  assume  a  denumerably  infinite  universe  of  atoms.  A 
formula  can  either  be  atomic,  which  means  it  is  an  atom,  or  nonatomic,  which  means 
it  is  an  expression  of  the  form  (F\  F%  •  ■  •  Fn),  in  which  the  Fi  are  formulas  and  n>0. 
Formulas  are  required  to  be  finite.  Nonatomic  formulas  are  often  called  lists.  A  list  of 
depth  one  is  a  list  all  of  whose  elements  are  atoms.  A  list  of  depth  n>l  is  a  list  contain- 
ing at  least  one  list  of  depth  n  —  1. 

Abstract  Calculus:  An  abstract  calculus  is  a  pair  <£,  R>  in  which  2  is  a  set  of  atoms, 
called  the  reserved  symbols  of  the  calculus,  and  R  is  a  set  of  transformation  rules 
satisfying  the  following  definition. 

Transformation  Rules.  Each  transformation  rules  has  "the  form  A=&S  in  which  4  and 
if?  are  formulas.  A  is  called  the  analysis  part  or  pattern,  of  the  rule,  and  S  is  called  the 
synthesis  part  or  template  of  the  rule.  Atoms  in  A  are  called  pattern  constants  if  they 
are  reserved  symbols  of  the  calculus,  and  are  called  pattern  variables  if  they  are  not. 
We  do  not  permit  rules  to  be  universally  applicable,  a  notion  defined  next. 

Universally  Applicable  Rules:  A  rule  is  called  universally  applicable  if  its  analysis 
part  is  atomic  but  not  a  reserved  symbol.  That  is,  it  is  a  rule  of  the  form  x=>5  in  which 
x  is  a  pattern  variable.  We  discuss  later  the  reasons  we  do  not  permit  universally 
applicable  rules.    A  rule  is  nonuniver sally  applicable  if  its  analysis  part  is  either  a  list 
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or  a  reserved  symbol. 

22  Semantics 

Substitution:  If  x  is  an  atom  and  X  and  V  are  formulas,  then  X[x  =  V]  refers  to  the 
result  of  substituting  V  for  all  occurrences  of  x.  This  operation  can  be  defined  recur- 
sively as  follows: 

(XXX2  ■  ■  ■   Xn)[x  =  V]    =>    (Xx[x  =  V]X2[x  =  V]  ■  ■  ■  Xn[x  =  V]) 

x[x=V]    =>     V 

y[x  =  V]    =>    y,  if  y  is  atomic  and  x*y 

If  the  atoms  Xi,x2,  .  .  .  ,xn  are  all  distinct,  then  we  write  X\x x-Vx,X2=Vz,  .  .  .  ,xn  =  Vn] 
iorATxi=F1][x2=72]  •••  [*»=^]. 

Notice  that  substitution  satisfies  the  following  property: 

#[*i=*i xm=Xn][yl  =  Y1 yn  =  Yn] 

=   M[xx=Xx[yx=Yx yn  =  Yn] xm  =  Xm[yx=Yx yn=Yn]] 

Matching  and  Transformation:  We  say  that  a  formula  X  matches  the  analysis  part  of  a 

rule  A=s>S  if  there  are  formulas  Vx Vn  such  that  X  -  A\yx-Vx vn~Vn]<  where 

vx,  ,        ,  vn  are  the  pattern  variables  of  A.   If  this  is  the  case  then  we  can  apply  the  rule 
to  A"  toyield5[-u1=Ki vn  =  Vn]. 

Subformulas:  A  formula  X  is  called  a  subformula  of  a  formula  Y  if  there  is  some  for- 
mula M  and  atom  x  in  M  such  that  7  =  M[x-X\.  X  is  called  a  proper  subformula  of  7 
if  this  M  is  nonatomic. 

Reduction:  We  say  that  a  transformation  rule  reduces  a  formula  y  to  a  formula  Z  if 
that  rule  can  be  applied  to  a  subformula  of  Y.  That  is,  if  Y  =  i/[x=X]  and  the  transfor- 
mation rule  when  applied  to  X  yields  W ,  then  we  say  the  transformation  rule  reduces  Y 
to   Z   =    A/[x=FK].     More   precisely,    if  A=>5   is   the   rule,    Y  =    A/[x=X],    and  X   - 

A[vx-Vx vn-Vn],  then  Z  =  Af[x=Jf],  where  W  =  S[vx  =  Vx vn  =  Vn].   kreduc- 

tion  is  a  finite  sequence  of  formulas  Xx Xn,  such  that  for  each  Xi   there  is  a 
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transformation  rule  that  reduces  X^  to  Ai*.z.   We  say  that  a  formula  X  can  be  reduced  to 

a  formula  Y  when  either  X-Y  or  there  is  a  reduction  Xi Xn  such  that  X-Xx  and 

Xn-Y.    A  formula  is  in  reduced  form  when  none  of  the  transformation  rules  can  be 
applied  to  it. 

Walks:  We  call  a  reduction  from  X  to  Y  a  walk  and  write  'X  walk  F'  when  the  reduc- 
tion satisfies  the  walk  restriction.  Informally  the  walk  restriction  says  that  the  reduc- 
tion must  proceed  from  the  inside  out.  That  is,  we  can  never  apply  a  transformation 
rule  to  a  sub-formula  W  of  X,  and  then  later  in  the  reduction  sequence  transform  a  sub- 
formula  (proper  or  otherwise)  of  W.  Of  course,  the  walk  restriction  does  not  constrain 
the  order  in  which  rules  are  applied  to  nonoverlapping  subformulas. 

Diamond  Property:  A  relation  R  has  the  diamond  property  if  X  R  Xx  and  X  R  X^ 
implies  that  there  exists  an  X'  such  that  Xx  R  X  and  Xz  R  X'. 

2.3  Restrictions 

Ambiguous  Rules:  A  set  of  transformation  rules  is  ambiguous  if  there  exist  distinct 
rules  A=>S  and  A'=*>S'  in  the  set  such  that  there  is  a  formula  X  that  matches  both  A 
and  A1. 

Conflicting  Rules:  Two  transformation  rules  A^z>S  and  A'=>S'  (not  necessarily  dis- 
tinct) are  conflicting  if  there  is  a  formula  that  matches  both  A  and  a  proper  subpart  of 
A'.  That  is,  A=*>S  and  4'=>S"  are  conflicting  if  (.1)  A'  can  be  written  as  M\x~B\  where 
M  is  nonatomic,  and  (2)  there  are  formulas  V\t  .  .  .  ,  Vn  such  that  B[vi  =  Vlt     .  .  ,vn-Vn\ 

—  A\.v\-V\ vn  =  Ki].  where  vx vn  are  the  pattern  variables  that  appear  in  B 

or  A  or  both.    Note  that  a  transformation  rule  can  conflict  with  itself.   A  set  of  transfor- 
mation rules  is  none onflic ting  if  none  of  the  rules  conflict  with  each  other. 

Atomic  Rules:  A  transformation  rule  is  atomic  if  its  analysis  part  is  an  atom.  Since 
we  require  rules  to  be  nonuniversally  applicable,  the  only  permitted  atomic  rules  are 
those  whose  analysis  part  is  a  reserved  symbol.  A  transformation  rule  is  nonatomic  if 
it  is   not  atomic.    A  set  of  transformation  rules  is  anti-atomic  if  all  its  rules  are 


nonatomic. 

Universally  Applicable  Rides:  We  can  now  explain  why  we  do  not  permit  universally 
applicable  rules.  The  first  reason  is  that  such  rules  are  inherently  ambiguous  if  they 
are  combined  with  any  other  rules.  This  is  because  the  analysis  part  of  a  universally 
applicable  rule  matches  any  formula  (hence,  their  name).  Therefore,  the  only  unambi- 
guous calculus  containing  such  a  rule  is  the  calculus  that  has  only  that  rule.  The 
second  reason  is  that  these  rules  are  not  very  useful:  Since  these  rules  are  always 
applicable,  a  calculus  containing  them  has  no  terminating  reductions  and  no  reduced 
forms. 

3.  Walks  Have  the  Diamond  Property 

Theorem:  Walks  have  the  diamond  property  in  an  abstract  calculus  with  unambiguous, 
nonconflicting,  anti-atomic  rules  . 

Proof:  We  must  show  that  if  X  walk  Xx  and  X  walk  Xz,  then  there  is  an  X'  such  that 
Xi  walk  X'  and  X2  walk  X'.   The  proof  is  by  induction  on  the  size  of  X. 

Suppose  X  has  size  one,  that  is,  X  is  an  atom.  Since  the  rules  are  anti-atomic  there 
are  no  transformation  rules  applicable  to  X.  Hence,  X  =  Xx  =  X%  -  X'  satisfies  the 
theorem.   This  establishes  the  base  of  the  recursion. 

Now  suppose  that  X  is  nonatomic.  There  are  four  cases  depending  on  whether  or  not 
the  top  level  of  X  is  transformed  in  each  of  the  walks,  X  walk  Xx  and  X  walk  Xz- 

Case  1:  Suppose  that  the  top  level  is  transformed  in  neither  walk.  Now,  since  X  is 
nonatomic,  it  can  be  written  in  the  form  M[xx=Ux,  .  .  .  ,xn~Un\,  where  M  is  a  list  of 
atoms  (i.e.,  list  of  depth  one).  Since  the  top  level  of  X  is  not  transformed,  Xx  can  be 
written    in    the    form    M\xx-Vx,  .  .  .  ,xn  =  Vn],    and    Xz    can    be    written    in    the    form 

M[xx-Wx Xn  =  Wn].    Since  X  walk Xx  we  know  Ui  walk  Vit  for   l<i<n.    Similarly, 

since  X  walk  Xz,  we  know  Ui  walk  Wit  for  \<i<n.    Since  the  Ui  are  proper  subparts  of 
X,  they  are  smaller  than  X,  so  we  can  apply  the  inductive  hypothesis  and  conclude  that 
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there  are  Yx  such  that  V%  walk  J*  and  Wz  walk  Y%  (l<i<n).  We  let  X'  - 
M[x1=Yl xn  =  Yn]. 

We  still  must  show  that  Xx  walk  X'  and  X2  walk  X.  But  this  is  easy:  since  the  formu- 
las 1^  are  nonoverlapping,  walking  them  to  the  Yi  cannot  violate  the  walk  restriction. 
Hence,  walking  the  V^  individually  to  the  Yi  will  walk  X\  to  X'.  Similarly,  we  can  walk  X% 
to*'. 

Case  2:  Here  we  assume  that  the  top  level  of  X  has  been  transformed  in  the  walk 
from  X  to  X\,  but  not  in  the  walk  from  X  to  Xz.  However,  to  avoid  violating  the  walk 
restriction,  the  top  level  transformation  must  have  been  the  last  step  in  the  walk  from 
X  to  X\.  Hence  the  last  step  takes  a  formula  Z  into  X\  by  an  application  of  a  transfor- 
mation     rule      A=>S,       in      which      Z      =      A[vi=Mi vm=Mm]      and      X\       = 

S\yx-Mi vm-^m\  Since  this  last  step  is  the  only  one  to  transform  the  top  level  of 

X,  by  the  same  reasoning  as  in  Case  1  we  know  there  is  an  M  of  depth  one  such  that 

X  =  M[xx=Vx xn  =  Un] 

Z   =  M[xl=Vl x„  =  Fn] 

Xz  =  M[xl=W1 xn  =  Wn] 

Ui  walk  Vi3    l\  walk  Wit   for  l<i<n 

Now,  since  A  matches  the  top  level  of  X,  A  can  be  written  in  the  form 
M\xy=A\,  .  .  .  ,  xn=An  ].  Applying  properties  of  the  substitution  operator  Z  can  be  writ- 
ten in  the  form 

Z   =  A[vl=Ml vm-Mm) 

-  M\Xi=Ai xn=An]\vl=Ml vm=Mm] 

=  M[xx  =A1[v1=Ml.  .  .  .  ,vm=Mm],     .  .  ,  x„,  =  An[vi=Mlt  .  .  .  ,vm=Mm\] 

Hence,  Vt  =  Ai[vx=Mx vm=Mm],  for  l<i<n. 

By  the  inductive  hypothesis  we  know  there  are  Yi  such  that  Vi  walk  Yi  and 
Wi  walk  Yit  l<i<n.    We  claim  that  ^  must  have  the  form  ^[^1  =  ^1 ^m-Qm\  for 
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some  Qi,  l<i<n.  If  \  is  the  variable  vk  l.hen  this  is  trivially  true;  let  Qk  —  Y^.  If  Ai  is 
nonatomic,  then  the  only  way  there  could  fail  to  be  such  Qj  would  be  if  the  walk  from  1^ 
to  Yi  altered  the  top  level  structure  of  Vit  that  is,  eliminated  the  Ai  structure.  But  this 
would  violate  the  none onflic ting  restriction  on  rules,  since  it  would  require  a  transfor- 
mation rule  with  Ai  on  the  top  level  of  the  analysis  part.  Since  Ai  is  a  proper  subpart  of 
the  analysis  part  of  the  rule  A^>S,  we  would  have  conflicting  rules.   Thus  we  know  Yi  - 

Ai[vi=Qi vm  =  Qm].    We  will  take  our  X'  to  be  S[vx=Qx,  .  .  .  ,vm  =  Qm].    It  remains 

to  show  that  there  are  walks  from  Xx  and  X2  to  this  X'. 

In  the  case  of  Xx  this  is  trivial.   Note  that  since  we  have  V£  walk  Yit  we  also  have 

4l>i=A/i vm-Mm]  walk  A.[vx-Qx,  ■  ■  ■  ,^m  =  Qm.] 

We  can  separate  out  from  this  walk  the  individual  steps  that  apply  to  each  of  the  Mj. 
Thus  we  have  Mj  walk  Qj,  for  \<j<m.  Since  Xx  -  S\yx-Mx,  .  .  .  ,vm=Mm],  we  can  walk 
each  of  the  Mj  in  X\  individually  to  the  corresponding  Qj.  Since  the  Mj  do  not  overlap, 
the  catenation  of  the  individual  walks  is  itself  a  walk,  so  we  have  a  walk  from  Xx  to 
S[vx=Qlt  .  .  .  ,  vm-Qm\   But  the  latter  is  just  X,  so  we  have  Xx  i¥aikX'. 

We  now  consider  the  walk  from  X2  to  X.    Since  X2  =  M[xx=Wx,  .  .  .  ,Xn  =  Wn],  we  can 
walk  each  of  the  Wt  individually  to  Y\  yielding  Y  -  W[xj=Yj,  <^n-Yn\-    The  catena- 

tion of  these  individual  walks  is  a  walk,  because  the  Wt  are  nonoverlapping.  Hence 
there  is  a  walk  from  X2  to  Y. 

Now,  since  Yi  =  Ai[vx  =  Qx,  .  ,  ,  ,vm  =  Qm],  we  can  rewrite  Y  as  follows: 

Y  =  M[xx  =  Yx xn  =  Yn\ 

=  M[xx  -  Ax[vx-Qx,  .  .  .  ,vm  =  Qm] xn-  4»0i=£i vm-Qm\] 

=  M[xx=Ax Zn=An][vx  =  Qx,     .  .  ,vm  =  Qm] 

=  A[vx=Qx vm  =  Qm] 

The  latter  matches  the  left-hand  side  of  the  transformation  rule  A=>S,  so  we  can  apply 
this  rule  to  yield  S[yx=Qx,  .  .  .  ,vn  =  Qn],  which  is  X.    The  catenation  of  the  walk  from 
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Xz  to  Y  with  the  transformation  from  Y  to  X'  is  a  walk,  since  this  transformation 
applies  at  the  top  level,  and  no  previous  rules  applied  at  that  level.  Thus  we  have  a 
walk  from  X2  to  X'.   This  complete  Case  2. 

Case  3:  This  case  is  the  opposite  of  Case  2;  the  top  level  is  transformed  in  the  walk 
from  X  to  X%  but  not  in  that  from  X  to  X\.   The  proof  is  exactly  analogous  to  Case  2. 

Case  4:  In  this  case  the  top  level  is  transformed  in  both  the  walks,  from  X  to  X\  and 
from  X  to  Xz-  By  the  same  reasoning  as  in  Case  2,  the  last  step  in  each  of  these  walks 
must  be  a  top  level  transformation.  Thus  we  have  a  walk  from  J  to  a  formula  Y  such 
that  the  application  of  a  rule  A=s>S  to  the  top  level  of  Y  yields  Xx.  Similarly  we  have  a 
walk  from  X  to  a  formula  Z  such  that  the  application  of  a  rule  /4'=*-S"  to  the  top  level  of 
Z  yields  Xg.  Since  neither  the  walk  from  X  to  Y  nor  from  X  to  Z  can  have  altered  the 
top  level  structure  of  X,  we  can  write  X,  Y  and  Z  as  substitutions  into  a  depth  one  list 
Si: 

X  =   M[xx=Ux,  .  ..  ,xn  =  Un] 

Y  =  M[xx=Vx *n  =  7n] 

Z  =  M[xl=Wl xn=Wn] 

Wr  know  that  U\  walk  Vt  and  U+  walk  Wit  so  by  the  inductive  hypothesis  there  are  Y^ 
such  that  Vi  walk  Yt  and  Wx  walk  Yit  all  for  l<i<n.   Let  Q  =  M[xl  =  Yl xn  =  Yn]. 

We  know  that  the  top  level  of  Y  matches  the  left-hand  side  of  A=>S,  and  thai  the  top 
level  of  Z  matches  the  left-hand  side  of  4'^>.S".  We  intend  to  show  that  the  top  level  of 
Q  matches  the  left-hand  side  of  both  rules.  From  this,  and  the  hypothesis  that  the 
rules  are  unambiguous,  we  will  be  able  to  conclude  that  the  rules  A^>S  and  A'=>S'  are 
the  same  rule.   The  remainder  of  the  proof  then  follows  easily. 

We  now  show  that  the  top  level  of  Q  matches  A.    By  the  same  reasoning  as  in  Case  2 

we  know  that  there  are  At  such  that  Yi  —  Ai[yl  =  Q1 Vm-Qm\  where  vx vm  are 

the  pattern  variables  of  A  and  A  =  M[xx=A\,  .  .  .  ,xn=An].  Hence  we  can  rewrite  Q  as 
follows: 
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Q   =   M[xx=Yx xn  =  Yn] 

=  M[xx  -  Al[vx  =  Ql,  .  .  .  ,vm-Qm] 4ii>i  =  £i vm  =  Qm]] 

=  M[xl=A1 xn=An][vl=Ql vm  =  Qm] 

=    A[vx  =  Qx Vm=Qm] 

[hus  the  top  level  of  Q  matches  A.  Exactly  analogous  reasoning  shows  that  the  top 
evel  of  Q  match  A'.  Since  our  rules  are  unambiguous,  we  conclude  that  A- A'  and 
S-S'. 

We  now  define  X'  to  be  S[vx=Qlt  .  .  .  .vm-Qm\-  It  remains  to  show  that  X\  walk  AT' 
ind  X2  walk  AT'.  The  reasoning  is  analogous  to  that  used  in  Case  2.  Since  Vz  walk  Yl, 
{<i<n,  we  know 

4l>i=^i vm-Mm]  walk  A[vi  =  Qi vm  =  Qm] 

■fence  we  know  Mj  walk  Qj,  for  l<j<m.  Since  Xl  -  S[vl  =  Ml,  .  .  .  ,vm  =  Mm],  we  can 
<ralk  each  of  the  Mj  individually  to  Qj  to  yield  S[vx  =  Qx,  .  .  .  .  vm=£W].  which  is  X'. 
since  the  Mj  are  nonoverlapping,  the  catenation  of  these  walks  is  a  walk  from  Xx  to  X. 
ilxactly  the  same  reasoning  applies  to  show  a  walk  from  X%  to  X'.  This  completes  the 
sroof  of  Case  4,  and  hence  the  proof  of  the  theorem.   Q.E.D. 

L  Reduction  has  the  Diamond  Property 

["he  following  lemma  shows  that  finite  sequences  of  walks  have  the  diamond  property, 
tfe  use  the  notation  Xx  walk*  Xn  to  mean  that  there  is  a  sequence  of  walks  from  V!  to 
Xn,  that  is, 

Xx  walk  Xz  walk  walk  Xn-X  walk  Xn 

fie  permit  n  =  l,  that  is,  Xx-Xn. 

Lemma:  If  X  walk*  Y  and  X  walk*  walk*  Z  then  there  is  an  X  such  that  Y  walk*  X' 
ind  Z  walk*  X'. 

Proof:  We  prove  a  slightly  stronger  result:   if  there  are  m  walks  in  the  reduction  of  X 
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to  Y  and  n  in  the  reduction  of  X  to  Z,  then  there  is  an  X'  that  can  be  reached  by  n 
walks  from  Y  and  to  walks  from  Z. 

The  proof  is  by  induction  on  the  maximum  number  of  walks  in  the  reductions  from  X 
to  Y  and  X  to  Z.  If  there  are  no  walks,  then  X  -  Y  -  Z  and  m-n  =0  so  we  can  take  X' 
—  X.   This  establishes  the  base  of  the  induction. 

Now  suppose  that  there  are  771  walks  in  the  reduction  of  X  to  Y  and  n  walks  in  the 
reduction  of  X  to  Z: 

X  walk  Yx  walk  Y2  walk  walk  rm_j  walk  Ym  =  Y 

X  walk  Zx  walk  Zz  walk  walk  Zn-X  walk  Zn  =  Z 

Case  1:  Suppose  m>n.  Then  we  can  apply  the  inductive  hypothesis  to  the  reductions 
from  X  to  Ym-i  and  X  to  Z,  since  these  both  contain  less  than  to  walks.  Hence  there  is 
a  W  such  that  Ym-i  reaches  W  inn  walks,  and  Z  reaches  W  in  to  —  1  walks. 

Since  Ym-i  reaches  Y  by  one  walk  and  W  by  n  walks,  and  n<m  (by  supposition),  we 
can  apply  the  inductive  hypothesis  again  and  conclude  that  there  is  an  X'  such  that  Y 
reaches  X'  by  n  walks  and  W  reaches  X'  by  one  walk.  Hence  we  have  found  an  X'  such 
that  Y  reaches  X'  in  n  walks  and  Z  reaches  X'  in  to  walks  (since  to  — 1  take  Z  to  W  and 
one  more  takes  W  to  X').   This  completes  Case  1. 

Case  2:  Suppose  771=71.  Apply  the  inductive  hypothesis  to  the  reductions  from  X  to 
Ym-i  and  from  X  to  Zm-X.  Thus  there  is  a  W  reachable  from  both  Ym-\  and  Zm-\  in 
771—1  walks.  Apply  the  inductive  hypothesis  to  the  reductions  from  Ym  -x  to  Y  and  W  to 
get  a  U  reachable  from  Y  in  m  -1  walks  and  from  W  in  one  walk.  Similarly  there  is  a  V 
reachable  from  W  in  one  walk  and  from  Z  in  77i  — 1  walks.  Apply  the  inductive 
hypothesis  one  last  time  to  the  reductions  from  W  to  U  and  K  to  get  an  X'  reachable 
from  both  U  and  Vby  one  walk.  Now,  since  Y  reaches  U  by  m—  1  walks,  and  U  reaches 
X'  by  one  walk,  Y  reaches  X'  by  to  walks.  Similarly,  Z  reaches  X'  by  771  walks.  This 
completes  Case  2. 
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Case  3:  Suppose  m<n.  This  is  proved  exactly  like  Case  1.  Hence  the  lemma  is 
proved.    Q.E.D. 

Lemma:  Reduction  has  the  diamond  property  in  an  abstract  calculus  with  unambi- 
guous, nonconflicting,  anti-atomic  rules. 

Proof:  Note  that  a  single  application  of  a  transformation  rule  constitutes  a  legal  walk 
(it  takes  at  least  two  reduction  steps  to  violate  the  walk  restriction).  Since  finite 
sequences  of  walks  have  the  diamond  property,  so  do  finite  sequences  of  rule  applica- 
tions.  But  a  reduction  is  just  a  finite  sequence  of  rule  applications.   Q.E.D. 

Theorem  (Generalized  Church-Rosser):  Reductions  have  the  diamond  property  in  an 
abstract  calculus  with  unambiguous,  nonconflicting  rules. 

Proof:  This  result  differs  from  the  previous  in  that  we  do  not  require  the  rules  to  be 
anti-atomic.  It  was  convenient  to  restrict  our  attention  to  anti-atomic  sets  of  rules 
when  proving  that  walks  have  the  diamond  property. 

We  define  a  one-to-one  correspondence,  called  depth-raising,  between  formulas  as 
follows.  Depth-raising  an  atomic  formula  a  yields  the  depth-one  list  (a).  Depth-raising 
a  list  (Fi  F2  ■  •  ■  Fn)  yields  the  list  {{F\~F^  ■  ■  •  F\)),  in  which  each  F\  is  the  result  of 
depth-raising  the  corresponding  Fi.  The  effect  of  depth-raising  ts  to  double  the 
number  of  parentheses  surrounding  lists,  and  to  place  single  parentheses  around 
atoms.   For  example,  depth-raising  (+  (sue  2)  3)  yields 

((  (+)  ((  (sue)  (2)  ))  (3)  )) 

Depth-raising  sets  up  a  one-to-one  correspondence  between  formulas  and  depth-raised 
formulas:  for  each  formula  there  is  exactly  one  depth-raised  formula,  and  for  each 
depth-raised  formula  there  is  exactly  one  formula.  The  crucial  point,  of  course,  is  that 
depth-raised  formulas  are  nonatomic. 

We  depth-raise  an  abstract  calculus  by  depth-raising  the  analysis  and  synthesis 
parts  of  each  of  its  transformation  rules.    Clearly  a  formula  X  matches  the  analysis 
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part  of  one  of  the  original  rules  if  and  only  if  the  depth-raised  formula  X  matches  the 
analysis  part  of  the  corresponding  depth-raised  analysis  part.  In  particular,  an  atomic 
formula  a  matches  the  analysis  part  of  an  atomic  (but  nonuniversally  applicable)  rule 
b=>S  if  and  only  if  the  depth-raised  formula  (a)  matches  the  depth-raised  rule  (b)=>5'. 

Similarly,  one  of  the  original  rules  transforms  a  formula  X  into  a  formula  Y  if  and 
only  if  the  depth-raised  rule  transforms  X  into  Y.  It  is  also  clear  that  a  depth-raised 
transformation  rule  will  always  yield  a  depth-raised  formula. 

These  observations  allow  us  to  prove  that  reductions  have  the  diamond  property, 
even  in  the  presence  of  atomic  rules.  Suppose  we  have  an  abstract  calculus  whose 
rules  are  unambiguous  and  nonconflicting,  but  may  be  atomic.  Let  X,  Xi  and  X2  be  any 
three  formulas  such  that  X  reduces  to  X\  and  X2.  Now  consider  the  corresponding 
depth-raised  calculus  and  the  corresponding  formulas  X,  X\  and  X2.  Clearly  X  reduces 
to  Xi  and  X2  in  the  depth-raised  calculus.  Since  the  depth-raised  calculus  is  anti- 
atomic,  we  know  reductions  in  it  have  the  diamond  property.  Hence  there  is  a  depth- 
raised  formula  X'  such  that  both  Xx  and  X2  reduce  to  X'  in  this  calculus.  Therefore  we 
know  there  is  a  depth-lowering  X'  of  X'  such  that  Xx  and  X2  reduce  to  X'  in  the  original 
calculus.  Hence  reduction  also  has  the  diamond  property  in  the  original  calculus. 
Q.E.D. 

Corollary:  Reduced  forms  are  unique  in  an  abstract  calculus  with  unambiguous, 
nonconflicting  rules. 

hYoof:  Suppose  that  we  have  a  reduction  from  X  to  Y  and  a  reduction  from  X  to  Z 
and  that  both  Y  and  Z  are  in  reduced  form.  Since  reduction  has  the  diamond  property 
we  know  there  is  a  W  such  that  Y  reduces  to  W  and  Z  reduces  to  W.  But,  since  Y  is  in 
reduced  form,  no  rules  are  applicable  to  it,  so  Y=W.  Similarly,  Z-W.  Hence  Y-Z  and 
we  see  that  reduced  forms  are  unique.    Q.E.D. 
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